Sun Storage 7410 Unified Storage System
 
Sun Storage 7310 Unified Storage System
 
Sun ZFS Storage 7120
 
Sun ZFS Storage 7420
 
Sun Storage 7110 Unified Storage System
 
Sun ZFS Storage 7320
 
Sun Storage 7210 Unified Storage System
 

PLA-Support>Sun Systems>DISK>NAS>SN-DK: 7xxx NAS
 
.Old GCS Categories>Sun Microsystems>Storage - Disk>Unified Storage
 

In this Document

Goal

Fix

References

Applies to:

Goal

This document provides steps to discover iSCSI Target of S7000 from MS Windows iSCSI initiator using CHAP Authentication (both Unidirectional and Bidirectional).
- Unidirectional Target only challenges secret on Initiator
- Bidirectional Target challenges both Initiator and Target secret

Fix

1. How to configure unidirectional CHAP authentication

  (See also <Document 1181788.1> Sun Storage 7110 Unified Storage System: How to configure unidirectional CHAP for Solaris iSCSI initiator)

1.1 To configure unidirectional CHAP from the target (which is a Sun Storage 7110 Unified Storage System)

1.1.a  Enter into the BUI and create a target. Under Configuration -> san -> targets click on + sign to add new target. Fill in all require information. Check on the initiator authentication and make sure you do not provide 'Target CHAP Name' and Target CHAP secret.

1.1.b Create target group by 'drag and drop' the above new target to a target group.  The target can be added to an exiting target group or a new target group. You can name the target group something meaningful to user.

1.1.c Create initiator by clicking initiator button under 'Configuration -> san -> initiators'. Click + sign to add new initiator.
[ The iqn is given from iSCSI initiator node. To get this iqn, go to Windows host click on start/program files/Miscroft iSCSI initator/Microsoft iSCSI initiator. At the General tab, it displays the iqn of iSCSI initiator.]

Add an alias which can be meaningful to the user, check the box "use CHAP", provide iSCSI initiator CHAP user name and secret as provided by the initiator.

1.1.d Create Initiator Group (by drag and drop) using the above initiator (it can be new group or exiting group).

1.1.e Create iSCSI LUN by clicking shares, select project and click + on the left of the title LUN. Assign this LUN to a target group and initiator group in the drop down list as you just created in above steps.


1.2  Configure Windows iSCSI to discover a target using unidirectional CHAP

1.2.a - Click on Start/ProgramFiles/Microsoft iSCSi Initiator/ Microsoft iSCSI Initiator
-Leave General Tab alone
-Click on Discovery, Click Add then input IP address of the S7000 that assigned for iSCSI target just created in steps 1 above.
-Do not click on Advance and input CHAP settings on this steps.

1.2.b - Click on Targets and the target we created should already be listed. If we don't see the target created in step 1, there's problem either with network or iSCSI target creation was not correct. If targets in Step 1 does not show up, stop here and make it appear.

1.2.c - Select Target created in step 1 and click Logon.
Then click Advance.
Finally input CHAP name and CHAP secret created in step 1 when creating iSCSI Initiator.
By default the CHAP name is the the iqn number of this iSCSI Initiator.
Click OK
Click OK

1.2.d - Now the selected target should be "Connected". It is an indication that target has successfully discovered by initiator using unidirectional CHAP. It's ready to scan for LUN (disk)
from Windows click "Start/Run" then type "compmgmt.msc" Computer Management window will open
Click on Disk Management it will ask to initialize disks.
Click Cancel.
We need to know which Disk we want to initialize first. If presenting one or more LUNs with different sizes, it can be easy to identify which one is which. This document only shows how to connect to iSCSI target via CHAP authentication. At this point the LUN assigned to TargetGroup and InitiatorGroup should also shows up and ready to be initialized and create File System.


2. Steps to configure bidirectional CHAP authentication

  (See also <Document 1181843.1> Sun Storage 7110 Unified Storage System: How to configure bidirectional CHAP for Solaris iSCSI initiator)

This type of authentication includes all steps in unidirectional CHAP with these additional steps.

2.1 From target node S7000

2.1.a - While creating target unidirectional only require to check Authentication Mode = CHAP and leave chap name and chap secret blank. When using bidirectional authentication with Windows iSCSI it's required to input target CHAP secret and leave CHAP name blank.

2.2 From Windows iSCSI Initiator

Perform these steps before adding discovery address as described in 1.2
- From general tab of iSCSI initiator properties, click on secret button.
- Enter CHAP secret used when created iSCSI target in step 1.

Then perform all other steps in 1.2 (above)

Return to <Document 1398581.1> Sun Storage 7000 Unified Storage System: How to Troubleshoot iSCSI Problems.

References

This solution has no attachment